State and local government agencies are navigating a sea change in how they must manage and protect data. Reacting to citizen concerns about how organizations use and safeguard their personal information, lawmakers have introduced important new privacy protections, starting with the European Union’s landmark General Data Protection Regulation in 2018. Last year, state lawmakers across the U.S. introduced literally hundreds of bills on privacy related issues, creating a complex web of new requirements. This report examines how the evolving privacy landscape impacts data management in the public sector, and it offers advice for addressing new compliance challenges.